Configuration
Windrunner is configured with environment variables. This page covers the general application settings. Configuration for AI providers, voice transcription, and server deployment is organized on separate reference pages.
When running with Docker Compose, put environment variables in the .env file
next to docker-compose.yml.
Windrunner is a Spring Boot application, so standard Spring Boot properties can
also be supplied through environment variables. For example,
spring.example-setting becomes SPRING_EXAMPLE_SETTING. The Windrunner-
specific variables below are the ones used directly by this application and its
startup scripts.
Keep passwords and API keys out of source control.
Database
These are standard Spring Boot datasource settings. The Docker Compose file
sets them from the matching POSTGRES_* variables.
| Variable | Default | Description |
|---|---|---|
SPRING_DATASOURCE_URL | — | JDBC URL for PostgreSQL. |
SPRING_DATASOURCE_USERNAME | — | PostgreSQL username. |
SPRING_DATASOURCE_PASSWORD | — | PostgreSQL password. |
SPRING_DATASOURCE_HIKARI_MAXIMUM_POOL_SIZE | 10 in Docker Compose | Maximum database connection-pool size. |
For a local source checkout, server/start-local.sh defaults to
jdbc:postgresql://127.0.0.1:5432/windrunner, the current operating-system
username, and password test. Override the SPRING_DATASOURCE_* variables
when your local database uses different values.
Bootstrap administrator
These values are used only when the database has no users. They do not replace the password for an existing account.
| Variable | Default in Docker Compose | Description |
|---|---|---|
WINDRUNNER_BOOTSTRAP_SUPERADMIN_USERNAME | admin | First super administrator username. |
WINDRUNNER_BOOTSTRAP_SUPERADMIN_EMAIL | admin@localhost | First super administrator email. |
WINDRUNNER_BOOTSTRAP_SUPERADMIN_PASSWORD | changeme | First super administrator password. |
The local startup script uses the same username, email, and password defaults. Change the password after the first login.
Authentication
| Variable | Default | Description |
|---|---|---|
WINDRUNNER_AUTH_COOKIE_SECURE | true in the application; false in Docker Compose and local startup | Marks authentication cookies as Secure. Use true behind HTTPS and false for direct local HTTP. |
WINDRUNNER_AUTH_COOKIE_SAME_SITE | Lax | SameSite policy for authentication cookies. |
Email notifications
Email is optional and disabled by default. See Email notifications for SMTP settings, setup instructions, and delivery troubleshooting.
Related configuration
- AI providers: Select the chat provider and configure OpenAI, OpenRouter, Ollama, Groq, Gemini, or Claude.
- Voice transcription: Enable voice dictation and configure OpenAI or Gemini transcription.
- Server and deployment: Configure HTTP, uploads, Docker Compose, and advanced Spring settings.
- Structured logging: Write JSON logs for observability platforms or use normal text logs for local development.
For additional framework settings, see the official Spring Boot application properties reference.